Didn't find what you were looking for?
We have advanced search options to make it easier to locate posts, questions and answers on this community.
More information can be found at Advanced Search Options
If you are looking for something specific, please check if someone else has already asked or answered the same question.
A note regarding upgrades and Network Evolution:
Customers will be notified by their preferred communication method (email or text) when upgrades are available in their area for a specific service address
Security Shield falsely blocking rpstrength.com — HTTPS users get no block page, just an SSL error
I'm a Spectrum residential customer, and I also work for the company whose site is being blocked — I want to be upfront about that. I found this as a customer, on my own home connection, before anyone at work knew about it.
Spectrum's Security Shield is blocking rpstrength.com as a suspicious site. It's a false positive. Here's what I ran from my own Spectrum connection today:
curl.exe -v
< HTTP/1.1 302 Found
< Location:
The site is clean on Google Safe Browsing and VirusTotal, and loads normally on every non-Spectrum network I tried. Disabling Security Shield in the My Spectrum app immediately restored access on both my phone and my PC, which confirms the source.
The part I'd really like someone to escalate:
Over HTTPS, there is no block page at all. Security Shield can't present a valid certificate for the domain, so the TLS handshake just breaks. The user sees a bare ERR_SSL_PROTOCOL_ERROR — "this site can't provide a secure connection" — with no indication that Spectrum blocked anything, or that Security Shield even exists.
So from the customer's side, the site simply appears broken. I spent a day assuming the company's servers were down. They spent a day assuming their infrastructure was broken. It took packet-level debugging and a lucky plain-HTTP request to discover Spectrum was in the path at all. Since virtually all web traffic is HTTPS now, this means Security Shield's blocks are effectively invisible to the people they affect.
That's a bad outcome even when a block is correct. When it's a false positive, it means affected customers have no way to understand why a site they use every day suddenly stopped working — and no reason to suspect their ISP.
Requests:
Please recategorize rpstrength.com and all subdomains (including www.rpstrength.com and training.rpstrength.com) as a legitimate Health & Fitness site and remove them from the Security Shield block list. A URL verification form has already been submitted.
Please pass upstream that HTTPS blocks with no user-facing block page are close to undebuggable for customers.
Happy to provide any further logs or testing.
Comments
-
...another shopify.com site hosted on an IP that gets reported to blacklists. May have been some outrigger site that ultimately caused the false reporting.
1
